Juniper ScreenOS防火墙查看某个IP或某个Port或某个
ScreenOS版本:
ISG2000-> get system | in "Software Version"
Software Version: 5.4.0r6.0, Type: Firewall+×××
IP/Port/Mac又可细分为源IP、目的IP、源Port、目的Port、源Mac和目的Mac,命令如下:
ISG2000-> get session ?
> redirect output
| match output
<return>
dst-ip destination ip address
dst-mac destination mac address
dst-port destination port number or range
hardware show hardware sessions only
id show sessions with id
ike-nat show ike-nat ALG info
protocol protocol number or range
rm show sessions for resource management
service show sessions with service type
src-ip source ip address
src-mac source mac address
src-port source port number or range
tunnel show tunnel sessions
vsd-id get vsd-id specified sessions
下面是查看源IP为10.244.148.231的所有会话总数:
ISG2000-> get session src-ip 10.244.148.231
alloc 39986/max 524288, alloc failed 241404, mcast alloc 0, di alloc failed 0
total reserved 0, free sessions in shared pool 484302
slot 2: hw0 alloc 39884/max 1048575
Total 29340 sessions according filtering criteria.
id 138/s0*,vsys 0,flag 04200400/0000/0003,policy 5,time 2202, dip 0 module 0
if 23(nspflag 800801):10.244.148.231/44295->10.243.211.40/161,17,00005e00010a,sess token 24,vlan 0,tun 0,vsd 0,route 35
if 64(nspflag 800800):10.244.150.49/44295<-10.243.211.40/161,17,00005e000133,sess token 6,vlan 0,tun 0,vsd 0,route 21
下面是查看目的Port为161的所有会话总数:
ISG2000-> get session dst-port 161
alloc 40045/max 524288, alloc failed 241404, mcast alloc 0, di alloc failed 0
total reserved 0, free sessions in shared pool 484243
slot 2: hw0 alloc 39942/max 1048575
Total 38375 sessions according filtering criteria.
id 138/s0*,vsys 0,flag 04200400/0000/0003,policy 5,time 2201, dip 0 module 0
if 23(nspflag 800801):10.244.148.231/44295->10.243.211.40/161,17,00005e00010a,sess token 24,vlan 0,tun 0,vsd 0,route 35
if 64(nspflag 800800):10.244.150.49/44295<-10.243.211.40/161,17,00005e000133,sess token 6,vlan 0,tun 0,vsd 0,route 21
下面是查看目的Mac为00005e00010a的所有会话总数:
ISG2000-> get session src-mac 00005e00010a
alloc 39913/max 524288, alloc failed 241404, mcast alloc 0, di alloc failed 0
total reserved 0, free sessions in shared pool 484375
slot 2: hw0 alloc 39838/max 1048575
Total 39015 sessions according filtering criteria.
id 138/s0*,vsys 0,flag 04200400/0000/0003,policy 5,time 2142, dip 0 module 0
if 23(nspflag 800801):10.244.148.231/44295->10.243.211.40/161,17,00005e00010a,sess token 24,vlan 0,tun 0,vsd 0,route 35
if 64(nspflag 800800):10.244.150.49/44295<-10.243.211.40/161,17,00005e000133,sess token 6,vlan 0,tun 0,vsd 0,route 21
Juniper ScreenOS防火墙清除某个IP或某个Port或某个Mac会话数的方法就是把get关键字换成clear。
另外有需要云服务器可以了解下创新互联scvps.cn,海内外云服务器15元起步,三天无理由+7*72小时售后在线,公司持有idc许可证,提供“云服务器、裸金属服务器、高防服务器、香港服务器、美国服务器、虚拟主机、免备案服务器”等云主机租用服务以及企业上云的综合解决方案,具有“安全稳定、简单易用、服务可用性高、性价比高”等特点与优势,专为企业上云打造定制,能够满足用户丰富、多元化的应用场景需求。
网页题目:JuniperScreenOS防火墙查看某个IP或某个Port-创新互联
文章分享:https://www.cdcxhl.com/article2/epeic.html
成都网站建设公司_创新互联,为您提供域名注册、网页设计公司、企业建站、电子商务、品牌网站建设、微信小程序
声明:本网站发布的内容(图片、视频和文字)以用户投稿、用户转载内容为主,如果涉及侵权请尽快告知,我们将会在第一时间删除。文章观点不代表本网站立场,如需处理请联系客服。电话:028-86922220;邮箱:631063699@qq.com。内容未经允许不得转载,或转载时需注明来源: 创新互联